Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e39302e302f32342d3234203d3e20313436383137.roa
File:                     3130332e3132302e39302e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier:          htDM2XXq8wYL8j2JuxGgVOHkJx+7sPIdYQVIlSou0sk=
Subject key identifier:   E1:F1:7E:9E:87:12:36:CB:2D:8A:64:0C:11:F9:25:05:3C:F6:B6:80
Certificate issuer:       /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial:       57B7B7BF26AFBD71297672D6F323FBBD6BCF5FA2
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e39302e302f32342d3234203d3e20313436383137.roa
Signing time:             Fri 08 May 2026 09:41:55 +0000
ROA not before:           Fri 08 May 2026 09:36:55 +0000
ROA not after:            Fri 07 May 2027 09:41:55 +0000
asID:                     146817
IP address blocks:        103.120.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b7:b7:bf:26:af:bd:71:29:76:72:d6:f3:23:fb:bd:6b:cf:5f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
        Validity
            Not Before: May  8 09:36:55 2026 GMT
            Not After : May  7 09:41:55 2027 GMT
        Subject: CN=E1F17E9E871236CB2D8A640C11F925053CF6B680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:ac:7c:68:6c:43:90:36:c3:ff:1c:35:b4:
                    0c:da:b8:20:df:6d:33:e2:f8:90:ea:1d:25:56:8f:
                    b9:8e:f6:d3:03:85:1e:41:c4:c7:57:56:32:8f:de:
                    ef:1e:f5:73:55:59:1d:b3:61:83:eb:3c:72:17:14:
                    4f:77:33:aa:aa:52:9a:e9:88:e1:1a:c5:18:b0:8e:
                    4d:61:17:36:5d:92:05:5e:87:58:61:7e:2a:4a:01:
                    b0:45:64:a9:c8:a5:a9:71:33:98:db:b7:46:fe:8b:
                    42:32:6b:19:9a:99:0c:62:58:94:7e:f5:de:a3:d8:
                    5b:31:52:90:32:cc:8b:f4:d6:58:b4:4c:b6:a7:02:
                    ed:c0:68:ac:32:16:ef:d4:09:db:fd:9c:a1:da:e9:
                    84:de:a8:e1:75:d6:f4:8a:62:ab:1f:49:ae:32:ce:
                    24:97:ce:29:a1:b0:b2:b3:27:1e:c6:39:c7:16:f3:
                    b0:b5:16:43:08:ae:54:7e:db:1c:3b:a3:78:eb:39:
                    9c:a7:9b:02:5e:1c:55:c1:2f:af:74:9a:06:8b:dd:
                    07:b7:6d:2b:cb:53:e2:6f:e0:eb:0e:45:a2:bd:ce:
                    92:36:d5:c0:36:0e:98:c5:7f:70:9a:e1:7e:09:b2:
                    c9:ae:7e:4f:31:e1:43:45:b3:2a:13:0c:dd:09:62:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F1:7E:9E:87:12:36:CB:2D:8A:64:0C:11:F9:25:05:3C:F6:B6:80
            X509v3 Authority Key Identifier:
                keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3132302e39302e302f32342d3234203d3e20313436383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:dd:64:49:4c:0b:79:69:9f:9a:d0:d8:c5:84:07:cf:c6:f0:
         76:40:d7:80:b5:37:cc:30:74:4e:8c:b5:33:46:8c:4d:82:3f:
         95:e0:80:35:35:99:47:b2:37:86:2c:30:71:25:ce:10:c9:47:
         88:0d:c7:64:69:e5:78:55:62:6a:fd:d7:93:88:8f:da:a4:ac:
         6f:31:b6:4d:b0:b8:d1:65:e7:c3:1f:fd:02:46:12:a0:45:24:
         79:02:8d:1b:68:75:05:35:c2:e2:09:f4:f7:ad:3e:da:b0:0e:
         a8:40:0e:06:32:c4:88:4e:fd:3c:c0:9d:c5:4b:f4:cf:52:c2:
         71:e5:6f:d7:99:ff:8e:64:0b:d8:b2:d7:de:43:ca:95:e9:04:
         4f:ee:f3:5d:d8:8a:b3:77:9f:0d:4d:71:46:7b:74:56:16:f9:
         f9:2c:59:4f:8d:3c:06:f8:be:43:45:f4:46:9e:10:4c:55:83:
         b5:51:74:5c:7a:f4:82:67:ef:fc:69:92:64:5b:5d:a6:7a:56:
         72:ac:57:b9:e8:86:bb:ad:d8:84:02:9e:1a:e0:83:6a:f8:f0:
         e9:7e:ec:9e:f4:6f:b1:d3:38:42:d1:ba:c5:b3:cd:bc:57:df:
         3d:f8:ec:5e:f5:54:c1:a9:92:43:76:94:46:40:64:3c:c1:8e:
         2d:ec:fd:0e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUV7e3vyavvXEpdnLW8yP7vWvPX6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1
RUJFMDM2MjAeFw0yNjA1MDgwOTM2NTVaFw0yNzA1MDcwOTQxNTVaMDMxMTAvBgNV
BAMTKEUxRjE3RTlFODcxMjM2Q0IyRDhBNjQwQzExRjkyNTA1M0NGNkI2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOKx8aGxDkDbD/xw1tAzauCDf
bTPi+JDqHSVWj7mO9tMDhR5BxMdXVjKP3u8e9XNVWR2zYYPrPHIXFE93M6qqUprp
iOEaxRiwjk1hFzZdkgVeh1hhfipKAbBFZKnIpalxM5jbt0b+i0IyaxmamQxiWJR+
9d6j2FsxUpAyzIv01li0TLanAu3AaKwyFu/UCdv9nKHa6YTeqOF11vSKYqsfSa4y
ziSXzimhsLKzJx7GOccW87C1FkMIrlR+2xw7o3jrOZynmwJeHFXBL690mgaL3Qe3
bSvLU+Jv4OsORaK9zpI21cA2DpjFf3Ca4X4Jssmufk8x4UNFsyoTDN0JYuk1AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU4fF+nocSNsstimQMEfklBTz2toAwHwYDVR0j
BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz
NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDUwNTgwNzI5NDM5MTkxMTcvMC8zMTMwMzMyZTMx
MzIzMDJlMzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGd4WjANBgkqhkiG9w0BAQsFAAOCAQEA4t1kSUwLeWmfmtDYxYQH
z8bwdkDXgLU3zDB0Toy1M0aMTYI/leCANTWZR7I3hiwwcSXOEMlHiA3HZGnleFVi
av3Xk4iP2qSsbzG2TbC40WXnwx/9AkYSoEUkeQKNG2h1BTXC4gn0960+2rAOqEAO
BjLEiE79PMCdxUv0z1LCceVv15n/jmQL2LLX3kPKlekET+7zXdiKs3efDU1xRnt0
Vhb5+SxZT408Bvi+Q0X0Rp4QTFWDtVF0XHr0gmfv/GmSZFtdpnpWcqxXueiGu63Y
hAKeGuCDavjw6X7snvRvsdM4QtG6xbPNvFffPfjsXvVUwamSQ3aURkBkPMGOLez9
Dg==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:24 2026 by rpki-client